IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
| Software | From | Fixed in |
|---|---|---|
| ibm / global_security_kit | 8.5 | 8.5.x |
| ibm / global_security_kit | 8.0 | 8.0.x |
| ibm / global_security_kit | 7.0 | 7.0.x |
| ibm / global_security_kit | 8.0.13 | 8.0.13.x |
| ibm / global_security_kit | 7.0.4.29 | 7.0.4.29.x |
| ibm / global_security_kit | 7.0.4.28 | 7.0.4.28.x |